I Think Adware Might Have Installed Itself Into Firefox But I Can't Find It

Discussion in 'Malware Help - Public (Anyone Can Post & Respond)' started by jrasicmark, Oct 16, 2018.

  1. jrasicmark

    jrasicmark Private First Class

    During the hurricane, I tried to check the path while at work since my state was in its projected path. So I Googled it and found something beginning with "weather" and ending in ".org", but when I went there, the web page seemed to be automatically installing something. I thought I stopped it in time, but now I keep getting these ads and news stories pop up over the lower right corner of Firefox. And that same web address is always mentioned at the bottom of the pop-ups

    I looked in my extensions and add-ons, and didn't see anything new or suspicious. I Googled how to block pop-ups in Firefox, and they are blocked, but it didn't stop them. Then I tried to block that web address in Firefox's settings, but that didn't work either (and now I can't remember and can't find where I can find that feature in Firefox's settings).

    I had forgotten the exact web address since I had seen that last pop-up, but I was hoping I could refresh my memory by looking at where I had set that website to be blocked, but I can't find it again and I haven't seen another pop-up since I started typing this. But I'll be sure to mention it when it does pop up again.

    I'm hoping there is some way for me to fix this myself without having to bother the IT dept. And I'm not sure I have permission to download all the software mentioned in "Read me first". I thought all our computers had Mcafee security software installed, but I can't seem to find it to run it.

    Has anyone else had a similar problem and figured out how to eliminate these intruding pop-ups?
     
  2. jrasicmark

    jrasicmark Private First Class

    Just saw the pop-up again with some story about Tom Sellick, and the exact web address was theweathercenter dot org.
     
  3. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    You could see if running the below application that does not require installation helps. *I also think that knowing (a) what anti-virus/anti-malware program is installed (b) what type programs you are allowed to install, if any; are the type questions you should ask your IT Dept.;)

    Please download ZHPCleaner to your desktop.
    • Close all applications (including your web browsers and antivirus)
    • If you are using Windows Vista, 7/8/10; right-mouse click ZHPCleaner.exe and select "Run as Administrator".
    • Please click the "J'accepte/I agree" button.
    • First press the "Scanner" button. Be patient, the scan may take some time.
    • Do NOT fix/repair anything yet! Please upload that logfile also with your next reply.
     
  4. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

  5. jrasicmark

    jrasicmark Private First Class

    The anti-virus installed is Symantec. I ran a scan with it through last night and it didn't find anything.
    I also explained what happened to our IT person, and she had me check for anything that had been installed most recently and that turned out to be an automatic Firefox upgrade to 62.03. She told me to uninstall the upgrade.

    But before doing that, I thought I'd try ZHPCleaner first, so I downloaded it. Then I discovered the downloads folder appears to be hidden, so I had to run a search to find it. It appears filename extensions are also hidden, because it did not have .exe at the end. I double clicked it and I got an error message that said it encountered an illegal instruction. It gave me the choice to close or ignore, but it only happened again when I tried ignore.

    So I uninstalled Firefox. I didn't see an option to just uninstall the upgrade so I got rid of the whole thing. I'm going to see if I can find a way to download Firefox 62.02 (the previous version). If not, maybe 62.03 will be okay as long as I stay away from theweathercenter.org.
     
  6. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Last edited: Oct 17, 2018
  7. Eldon

    Eldon Major Geek Extraordinaire

    Did you ask her how to do this?
    I'm not alone in wanting to know how to uninstall a Firefox upgrade.
    By default, Windows hides file extensions.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds